This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0-EtqCADx1BdtrTMTL8a_iC7PwA.roa
File: 0-EtqCADx1BdtrTMTL8a_iC7PwA.roa (raw, json)
Hash identifier: wkn/Dm2ORkUZJ9z7aVUoYYMNohluFDWuRpepUs0UuWs=
Subject key identifier: D3:E1:2D:A8:20:03:C7:50:5D:B6:B4:CC:4C:BF:1A:FE:20:BB:3F:00
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019B282F5B03CDE52370A80FF69899CD4581
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0-EtqCADx1BdtrTMTL8a_iC7PwA.roa
Signing time: Tue 16 Dec 2025 17:22:30 +0000
ROA not before: Tue 16 Dec 2025 17:22:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401152
IP address blocks: 77.239.100.0/22 maxlen: 24
77.239.112.0/22 maxlen: 24
144.31.8.0/23 maxlen: 24
144.31.11.0/24 maxlen: 24
144.31.13.0/24 maxlen: 24
144.31.15.0/24 maxlen: 24
144.31.32.0/19 maxlen: 19
144.31.91.0/24 maxlen: 24
144.31.96.0/22 maxlen: 24
144.31.101.0/24 maxlen: 24
144.31.102.0/24 maxlen: 24
144.31.109.0/24 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.111.0/24 maxlen: 24
144.31.112.0/23 maxlen: 24
144.31.128.0/21 maxlen: 24
144.31.144.0/20 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.224.0/22 maxlen: 24
144.31.228.0/23 maxlen: 24
144.31.230.0/23 maxlen: 24
144.31.248.0/23 maxlen: 24
150.241.64.0/24 maxlen: 24
150.241.80.0/23 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
193.23.212.0/22 maxlen: 24
193.23.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Dec 2025 17:46:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:28:2f:5b:03:cd:e5:23:70:a8:0f:f6:98:99:cd:45:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Dec 16 17:22:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3e12da82003c7505db6b4cc4cbf1afe20bb3f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:c2:16:95:5e:27:90:e5:63:68:81:8d:e1:
38:24:22:a0:dc:7c:52:a2:2b:69:0f:90:1a:76:dd:
95:9c:78:a0:0a:ea:a7:fb:51:3c:1e:7e:6f:d9:39:
af:b7:c0:66:d5:e8:26:b4:db:8b:dd:98:d9:cc:e7:
b0:a1:fc:a9:b0:88:07:f0:77:93:6b:6f:b8:90:09:
ca:69:8d:be:44:4a:1e:a3:e2:65:4f:5c:4a:f4:9b:
10:b6:fe:d0:08:1a:8e:5f:53:a0:ce:c4:6b:6d:87:
41:5f:06:b9:e6:fa:75:f8:b7:05:74:f1:c8:65:ab:
7f:5a:a3:b3:a2:78:b3:45:5a:00:b9:fe:00:1b:9c:
82:3a:7c:8a:ea:1d:e4:6f:de:22:64:53:05:65:2a:
e3:cb:8f:a9:cf:54:c9:31:aa:6b:63:ba:6d:7e:b6:
c4:4c:2b:bd:14:93:98:4e:34:9f:68:bf:ad:1d:d6:
26:c5:5f:39:ae:7f:1a:5b:4a:df:98:0f:fd:41:6c:
fb:25:64:40:8f:f9:2e:23:56:45:27:64:94:27:b9:
bc:78:9c:cf:7d:ef:56:b7:29:a4:32:17:6b:b4:66:
db:10:b4:ce:55:75:ba:03:b2:71:09:c1:7b:50:3c:
1a:18:46:bb:da:dd:8d:78:0e:d0:55:4d:00:ad:c3:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:2D:A8:20:03:C7:50:5D:B6:B4:CC:4C:BF:1A:FE:20:BB:3F:00
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0-EtqCADx1BdtrTMTL8a_iC7PwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.100.0/22
77.239.112.0/22
144.31.8.0/23
144.31.11.0/24
144.31.13.0/24
144.31.15.0/24
144.31.32.0/19
144.31.91.0/24
144.31.96.0/22
144.31.101.0-144.31.102.255
144.31.109.0-144.31.113.255
144.31.128.0/21
144.31.144.0-144.31.163.255
144.31.224.0/21
144.31.248.0/23
150.241.64.0/24
150.241.80.0/23
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
193.23.212.0/22
193.23.222.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ae:98:72:33:64:10:c3:49:46:10:d1:d4:75:6c:cd:f4:db:
93:07:17:59:30:ea:af:9e:10:9c:2e:94:b1:62:94:63:02:71:
1f:a3:44:57:64:f0:46:ca:fd:11:74:f6:aa:35:25:e1:13:e8:
1d:2d:ed:85:54:7c:cf:97:00:85:af:bf:5a:fd:23:38:93:c7:
e6:3b:31:cd:12:e8:53:c0:5c:f7:5f:b8:a1:a1:0d:f1:36:cb:
d8:0f:0d:f9:c9:3c:49:45:ad:6e:de:ff:4c:35:00:11:7f:df:
0d:80:3d:f6:08:ae:e7:49:2f:bf:87:4c:49:98:02:ee:f4:2f:
e9:f5:fb:a4:09:ac:e4:29:c5:ee:41:fc:cd:dd:49:d2:0e:4f:
b8:42:32:cd:ba:3e:29:37:cf:1c:32:3e:e7:f4:56:72:9c:06:
19:c7:63:f0:53:60:0b:1a:f6:f2:3e:96:5f:2d:16:8f:47:46:
2e:1e:d0:ca:e1:c5:d0:2f:56:65:da:33:2b:37:e1:56:cb:f5:
b5:ff:d5:f0:1f:90:c0:4b:bf:e2:5a:0a:22:fb:f0:98:bc:69:
ab:6d:14:bb:49:95:f3:03:22:be:06:d2:5d:a5:db:be:0c:76:
8c:e3:19:7b:82:3d:56:54:3b:34:0a:9c:5a:85:d1:61:dc:d8:
d0:68:85:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 00:20:25 2025 by rpki-client